Re: [IPCop-user] Other firewall progs

NightLord wrote:
> Craig White a écrit :
>
>> On Mon, 2009-09-28 at 12:15 -0400, Renaud (Ron) OLGIATI wrote:
>>
>>
>>> Please forgive my use of rude words, but the order has come from on high, that
>>> all the Linux OSes on the system must be replaced by a commercial product
>>> from Redmont ;-3(
>>>
>>> Does anyone here know of a firewall prog that could replace IPCop, and runs
>>> under MS W*****s ?
>>>
>>>
>> ----
>> afaik, all of the commercial firewall 'appliances' use either Linux or
>> BSD or Cisco's OS.
>>
>>
>>
>
> And what about Checkpoint solutions ? they used to be windowsed
> solutions but are they still ?
>
> And what about Isa Server ? it's from Microsoft... I don't know if you
> can trust it, but if the orders come from very high above you and that
> you're a security expert, then you can only admit that they are right,
> because they are up above... ;) naaaaaa! just kiddin !!! If people up
> there want to be sure of their replacement project, they just ask them
> to spend some money on intrusive test before and after.... just to have
> fun...
>
> Stephane
>
Checkpoint as a Windows app? Not in any of their appliances that I've
seen. Management consoles, sure, but I far as I can tell the appliances
have been either BSD or Linux based.
There are also appliance vendors who supply ISA as an appliance on
embedded Windows. I'd personally make sure that the powers that handed
down this edict realize they're probably tossing all their other
appliances out the window (pun intended) in the process as well. I
don't know how many that might be but this could be a rather costly
decision, future issues aside. If you classify routers and switches as
well (they all have an OS) and start adding up the cost, perhaps there's
some microscopic chance they'll see reason and/or the error of their
ways. Nah, probably not, but it might be fun just to see how big of a
migration bill you could come up as an exercise. Don't forget to
include all the man hours required to actually do the replacement or
hire the consultants to do it for you since it would likely take way
more time than they're willing to allow.
Good luck.